---
title: "Get IP Address Blacklist Incident"
method: GET
path: "/networks/traffic/blacklistincidents/ipaddresses/{blacklistIncidentIdentifier}"
tags: ["Traffic Health"]
---

# Get IP Address Blacklist Incident

`GET /networks/traffic/blacklistincidents/ipaddresses/{blacklistIncidentIdentifier}`

## Request

- Base URL: `https://api.eflow.team/v1`
- URL: `https://api.eflow.team/v1/networks/traffic/blacklistincidents/ipaddresses/{blacklistIncidentIdentifier}`
- Auth: API key in header `X-Eflow-Api-Key`
- TypeScript: <https://skmtc.dev/everflow/apis/everflow-network-api-tracking-domains/docs/networks/traffic/blacklistincidents/ipaddresses/:blacklistIncidentIdentifier/get.ts> (a function with typed inputs; its response is checked against the schema)

**Traffic Health Premium.** A single hosting-IP blocklist incident by its identifier — provider and vendor, status, the IP address it affects, the vendor's listing details, and a delist URL where available. Requires `has_blacklist_monitoring`.

## Path parameters

- `blacklistIncidentIdentifier` string, required

## Response `200`

- IpBlacklistIncident
  - `network_id` integer
  - `ip_address` string
  - `ip_address_id` integer
  - `identifier` string
  - `status` string
  - `provider` string
  - `vendor` string
  - `time_created` integer
  - `time_saved` integer
  - `time_last_observed` integer
  - `time_resolved` integer
  - `relationship` object
    - `vendor` BlacklistVendor: Listing details for the flagging vendor.
      - `provider` string
      - `category` string
      - `name` string
      - `identifier` string
      - `website_url` string
      - `impact_level` string: `low`, `medium`, or `high`.
      - `impact_details` string
      - `listing_criteria` string
    - `ip_address` object
      - `ip_address_id` integer
      - `ip_address` string
      - `ip_version` string: `ipv4` or `ipv6`.
      - `is_external` boolean
    - `delist_url` string: Delisting request URL where available.

---

[API](https://skmtc.dev/everflow/apis/everflow-network-api-tracking-domains.md) - [All operations](https://skmtc.dev/everflow/apis/everflow-network-api-tracking-domains/llms.txt) - [OpenAPI document](https://skmtc.dev/everflow/apis/everflow-network-api-tracking-domains/revisions/39242cee0e32?raw)